iCloud and your data

What leaves your device

Sharing a document is the main path anything in Colophon takes off your device, and it only happens when you explicitly choose Share… and invite someone: search, chat, and editing never reach outside the device. The one other path is a trusted-timestamp request when you digitally sign, which sends only a hash of the signature — never the document; see Digital signatures.

What's stored, and where

A shared document moves into your own iCloud Drive, under your own Apple Account: Apple's infrastructure, governed by your iCloud account and Apple's own privacy terms, rather than a server Colophon operates or has access to.

Undoing a share

Stop Sharing at any time to pull a document back to local-only storage; see Share and collaborate with iCloud for the full flow.